Companion virus

Virus using the name of a common system file

A companion virus is one which, rather than injecting its code into another file, takes its place instead. Commonly targeted files for such viruses are ones that are in regular use, especially on system startup, which ensures the virus is executed.

Companion viruses operate by replacing files, either in the same location, deleting or renaming the original, or by placing themselves somewhere ahead of the original file in the path. Some companion viruses also run the original file once they are activated, to ensure the system runs properly and to cloak their own presence.

Quick Links

Poll
Does your company allow you to use a personal laptop/mobile device to access company resources?
Yes, it's allowed
Yes, it's actively encouraged
No
I don't know
Leave a comment
View 2 comments

Jobs Career Sidebar

Malware Prevalence
Autorun |#######|
Encrypted/Obfuscated |#####|
Heuristic/generic |#####|
Sality |####|
Zbot |####|
 View this month's full report

Virus Bulletin currently has 225,288 registered users.